Threats tagged 'ghsa-6rq7-m52p-8pqg'

A vulnerability in Xuxueli xxl-job versions prior to 3.2.0 affects the getJobsByGroup function in JobLogController.java. This flaw allows improper control of resource identifiers via manipulation of the jobGroup argument, leading to resource injection and authorization bypass. The vulnerability can be exploited remotely and has been publicly disclosed. A fix is available in version 3.2.0.